Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/144bc388-5f5c-33d5-9a2a-2c52d3ae7a4f.roa
File:                     144bc388-5f5c-33d5-9a2a-2c52d3ae7a4f.roa (raw, json)
Hash identifier:          y+2A+Wz7StoLpvcV0AmihuWR52eTEli6T1QHmb7VHWo=
Subject key identifier:   CE:6C:6B:69:B8:F2:F7:5E:24:01:1C:1E:21:42:42:B8:5B:83:E7:A4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089DE3EDE94E57A13769FC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/144bc388-5f5c-33d5-9a2a-2c52d3ae7a4f.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.213.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:de:3e:de:94:e5:7a:13:76:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=1c046c4c-6b47-4623-af18-13f2431610fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:c6:68:73:c9:e3:57:38:6e:ce:f7:2b:fa:
                    a9:70:82:b6:2e:d7:5f:6b:e7:21:37:ea:8c:d7:13:
                    74:c8:b0:50:f7:ea:5a:7d:54:01:ef:d8:b0:24:b3:
                    0d:ca:48:37:8b:b4:0e:e0:43:51:3f:5f:dc:8f:ad:
                    3f:47:1c:24:56:7f:4a:71:f2:c9:a9:a0:10:fa:8c:
                    43:b0:d6:ba:96:ca:07:54:7b:90:10:c7:0b:3e:5f:
                    2a:88:79:1c:7a:af:ea:e7:01:38:37:34:5e:07:13:
                    c8:81:37:7b:df:44:0b:c8:2f:f4:ae:d5:e5:b4:d0:
                    7b:0a:6a:99:0f:7b:64:e6:0b:4a:f9:09:96:1c:31:
                    60:2e:d1:f8:38:d6:8c:c1:8d:35:c6:60:78:d6:4c:
                    af:e4:1e:6d:9d:cc:41:69:ef:12:82:37:91:e6:17:
                    35:e6:6d:ff:59:38:4d:3c:ee:14:f6:e8:1b:f0:76:
                    82:ed:af:e2:26:18:8f:ff:f0:e4:f1:c0:d8:ec:39:
                    4a:5e:34:08:8f:8f:48:be:ce:70:24:58:5e:ac:44:
                    db:6c:9b:e4:93:e0:60:36:30:78:fc:57:c6:0c:0d:
                    cd:b1:56:c5:10:35:2f:6e:96:39:85:c5:dd:56:a9:
                    b3:c2:cc:93:01:0c:d3:98:db:45:33:58:c3:95:39:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6C:6B:69:B8:F2:F7:5E:24:01:1C:1E:21:42:42:B8:5B:83:E7:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/144bc388-5f5c-33d5-9a2a-2c52d3ae7a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:53:e3:e7:88:cf:7b:5d:13:c5:c5:7d:e1:18:3e:37:9f:85:
         57:70:55:46:e1:d6:e9:5a:e6:20:8b:13:b9:d5:46:9f:32:54:
         3c:e3:a8:09:6c:57:07:36:2e:9e:75:88:a7:83:1c:15:05:a0:
         b8:50:fe:41:cb:dd:23:83:00:30:27:95:a8:8d:62:09:64:4d:
         a5:7a:b5:2e:d5:b4:df:c0:0d:cd:3a:fd:15:55:0a:d1:91:b7:
         ab:e8:79:12:6c:f7:9f:c7:81:9e:a0:0d:07:6c:f5:b5:76:74:
         a2:1f:6b:13:d1:5b:0a:5f:25:90:38:c8:01:f3:ae:8e:ba:33:
         24:4f:cb:f8:54:4c:08:8a:2f:ec:f2:84:4e:74:33:dc:e1:ee:
         56:84:11:02:91:ad:bb:56:0a:03:92:bc:6a:db:a4:e2:37:c2:
         37:43:bd:82:cd:33:c7:4e:16:c2:23:47:0b:5e:92:c2:f2:bd:
         14:94:9d:6f:2f:99:ab:73:0f:36:af:a1:48:8d:63:a3:77:b6:
         79:9e:f1:1f:a4:bb:28:2b:58:04:64:1e:6b:fd:71:02:25:81:
         89:96:03:fe:bd:41:28:ec:8b:85:15:a0:69:6e:f0:39:3c:95:
         48:d9:50:f6:26:b4:6f:77:80:b7:91:f0:b6:a5:61:3c:dc:1b:
         f6:0e:25:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:42 2025 by rpki-client